# This file contains the auditctl rules that are loaded
# whenever the audit daemon is started via the initscripts.
# The rules are simply the parameters that would be passed
# to auditctl.

# First rule - delete all
-D

# Increase the buffers to survive stress events.
# Make this bigger for busy systems
-b 8192

# Enable auditing but mutable
-e 1

# Feel free to add below this line. See auditctl man page
-f 1

{% for rules in os_linux_audit_rules %}
{{ rules }}
{% endfor %}
